$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/783b05b4-a0a1-4e31-b7b4-cc8368668534.roa File: 783b05b4-a0a1-4e31-b7b4-cc8368668534.roa (raw, json) Hash identifier: gbE2up5OHgjSSjsSyuHpLyluyaQYyZF4XFcRUuDkt8w= Subject key identifier: 44:53:8C:AA:2A:70:98:83:AE:2B:9C:72:2F:1B:75:13:5C:0B:84:B2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 72E9EAF7C02CDB0416AF5C709EDC06F79AA9E256 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/783b05b4-a0a1-4e31-b7b4-cc8368668534.roa Signing time: Fri 18 Apr 2025 00:10:22 +0000 ROA not before: Fri 18 Apr 2025 00:10:22 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:c000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:e9:ea:f7:c0:2c:db:04:16:af:5c:70:9e:dc:06:f7:9a:a9:e2:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 18 00:10:22 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=5bb704067f93425bcf3bd2063d26abaf3178353ce0ff2a28b8321236e1992edf, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ee:26:36:b7:88:67:85:5e:9f:6f:6a:ca:44: 05:41:74:de:84:fe:40:fc:88:40:02:56:bb:11:e0: 8a:fd:27:dd:e9:08:d6:5d:1d:55:0a:f8:97:94:f0: e7:2e:47:98:87:2c:63:b6:15:04:58:69:8c:7e:7f: 69:e4:c9:36:25:a8:3f:09:ad:47:4a:cc:e1:5c:20: 7d:50:27:56:af:43:b5:25:fb:f7:27:af:5d:9f:53: 66:40:66:c8:3a:4c:59:e7:bb:a0:6f:f3:9d:81:51: 0b:a9:64:3e:4c:a5:6e:d9:5e:b2:a6:57:73:8a:fd: 51:e3:12:e6:d5:ab:18:16:bc:10:0c:0b:d4:2c:52: 73:ac:01:e6:4c:b2:3c:e5:f7:b9:75:70:0b:3e:91: 6c:5b:c5:92:e6:ba:eb:98:29:e5:48:b0:5a:72:a8: 70:ae:db:9d:fe:4e:50:08:2c:21:a1:3c:d1:fd:0d: 41:c4:06:67:09:cc:d3:21:67:59:d1:c2:94:0a:32: 98:67:60:47:cb:33:d8:0a:13:89:2b:32:4f:1c:d1: bb:54:7e:b7:da:fc:36:62:08:ea:2e:b6:23:91:e5: e5:1c:9e:cd:e3:68:a8:9a:25:49:57:79:b6:2c:b0: a4:2a:96:1f:af:12:2b:b5:81:d0:0c:7d:0c:f0:ce: 1c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:53:8C:AA:2A:70:98:83:AE:2B:9C:72:2F:1B:75:13:5C:0B:84:B2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/783b05b4-a0a1-4e31-b7b4-cc8368668534.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:c000::/40 Signature Algorithm: sha256WithRSAEncryption 1b:49:6f:5a:fe:aa:b6:d0:70:d0:3d:18:ec:c1:25:3f:fc:84: be:56:77:61:05:e5:8f:ac:34:db:98:42:75:5c:03:4b:0e:e3: 4f:b7:7b:8b:90:a9:41:33:77:8c:b0:25:53:f4:4b:3b:d6:23: 41:88:af:a5:70:03:28:77:9b:b7:23:a0:41:e1:1e:f8:04:88: 6d:46:41:97:51:5f:c4:7c:be:ee:ae:f1:69:98:6a:d6:90:3a: cb:c8:16:09:dc:08:b0:9d:f5:2a:49:76:36:97:d9:20:b7:42: 9e:05:85:16:da:94:e9:56:ac:3b:52:d5:99:81:96:60:7d:e8: 53:c2:95:95:02:6a:f2:49:68:eb:9b:db:ad:d3:42:bb:1b:53: 86:8e:ec:67:f7:87:1b:06:b5:2f:86:c7:55:93:ac:be:07:5e: 89:87:90:0e:2d:49:eb:b9:84:1b:eb:12:09:93:c9:a8:b9:f7: 23:e1:81:b5:39:49:5d:c7:e7:a4:ff:16:07:b6:04:52:19:8b: 39:ee:ef:ee:56:4c:53:2a:72:03:03:4a:10:d1:ca:ea:0a:02: 74:64:ab:86:91:8a:a2:5f:f7:18:82:7c:65:cd:8e:77:b4:2e: bf:5f:12:58:a8:59:ab:84:0a:a6:a5:99:78:71:65:38:49:06: c0:af:25:96 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUcunq98As2wQWr1xwntwG95qp4lYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxODAwMTAyMloX DTI1MDUyMzIzNTk1OVowejFJMEcGA1UEBRNANWJiNzA0MDY3ZjkzNDI1YmNmM2Jk MjA2M2QyNmFiYWYzMTc4MzUzY2UwZmYyYTI4YjgzMjEyMzZlMTk5MmVkZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1u4mNreIZ4Ven29qykQFQXTehP5A /IhAAla7EeCK/Sfd6QjWXR1VCviXlPDnLkeYhyxjthUEWGmMfn9p5Mk2Jag/Ca1H SszhXCB9UCdWr0O1Jfv3J69dn1NmQGbIOkxZ57ugb/OdgVELqWQ+TKVu2V6ypldz iv1R4xLm1asYFrwQDAvULFJzrAHmTLI85fe5dXALPpFsW8WS5rrrmCnlSLBacqhw rtud/k5QCCwhoTzR/Q1BxAZnCczTIWdZ0cKUCjKYZ2BHyzPYChOJKzJPHNG7VH63 2vw2YgjqLrYjkeXlHJ7N42iomiVJV3m2LLCkKpYfrxIrtYHQDH0M8M4cdQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFERTjKoqcJiDriucci8bdRNcC4SyMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc4M2IwNWI0LWEwYTEtNGUzMS1iN2I0LWNjODM2ODY2ODUzNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8sAwDQYJKoZIhvcNAQELBQADggEBABtJb1r+qrbQcNA9GOzB JT/8hL5Wd2EF5Y+sNNuYQnVcA0sO40+3e4uQqUEzd4ywJVP0SzvWI0GIr6VwAyh3 m7cjoEHhHvgEiG1GQZdRX8R8vu6u8WmYataQOsvIFgncCLCd9SpJdjaX2SC3Qp4F hRbalOlWrDtS1ZmBlmB96FPClZUCavJJaOub263TQrsbU4aO7Gf3hxsGtS+Gx1WT rL4HXomHkA4tSeu5hBvrEgmTyai59yPhgbU5SV3H56T/Fge2BFIZiznu7+5WTFMq cgMDShDRyuoKAnRkq4aRiqJf9xiCfGXNjne0Lr9fElioWauECqalmXhxZThJBsCv JZY= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:46 2025 by rpki-client on console.sobornost.net